KMDF Installation Restrictions and Permissions

I’m new to driver dev, and I’ve been asked a question that I can’t find an answer for: Are admin privileges required to install signed kernel-mode drivers?

I was under the impression that a non-admin user wouldn’t be allowed to install kernel-mode drivers, but I can’t find anything from Microsoft that states that. When I run as an unprivileged user, I’m prompted to log in as an admin like I’d expect, so I’m confident this is the case, but beyond saying “try it”, I don’t have a source to cite.

Thanks!
Mike

>Are admin privileges required to install signed kernel-mode drivers?

IIRC PnP installs which do not require consent UI (“Do you trust software from them?”) are all processed without any user intervention, so, logged-on admin is not a must.


Maxim S. Shatskih
Microsoft MVP on File System And Storage
xxxxx@storagecraft.com
http://www.storagecraft.com

On 28-May-2015 20:06, mebanduc@ra.rockwell.com wrote:

I’m new to driver dev, and I’ve been asked a question that I can’t find an answer for: Are admin privileges required to install signed kernel-mode drivers?

Drivers from Windows Update or inbox can be installed by non-admin users.

– pa

From Windows Internals:

“The user-mode PnP manager first tries to perform an automatic install without user intervention. If the installation process involves the posting of dialog boxes that require user intervention and the currently logged-on user has admin privileges… [it] execute[s] the Hardware Installation Wizard… If the currently logged-on user doesn’t have administrator privileges (or if no user is logged on) and the installation of the device requires user interaction, the user-mode PnP manager defers the installation until a privileged user logs on.”

So, there’s that.

Peter
OSR
@OSRDrivers